Vulnerabilities > Advanced Real Estate Script Project > Advanced Real Estate Script > High

DATE	CVE	VULNERABILITY TITLE	RISK
2017-12-13	CVE-2017-17603	SQL Injection vulnerability in Advanced Real Estate Script Project Advanced Real Estate Script 4.0.7 Advanced Real Estate Script 4.0.7 has SQL Injection via the search-results.php Projectmain, proj_type, searchtext, sell_price, or maxprice parameter. network low complexity advanced-real-estate-script-project CWE-89	7.5

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.